I guess it depends on if all the apartments individually are on VLANs.
Adding in a router would add double-NAT but assuming no DMZ or port forwarding, it should isolate it decently. (I would probably only do banking stuff over cellular connection.)
I think a four-unit mom and pop has a much bigger risk of not using VLANs and instead SOHO crap than a couple hundred unit complex.